You need to clearly define your threat model. What exactly are youdefending against? What scenario do you want to avoid?
Also, your decision of on-premise or Aurora is extremely relevant to yourrange of options.
Cheers,Greg